Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251981	4.3	警告	Apache Software Foundation	-	libcloud における証明書偽造の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4340	2012-03-27 18:42	2011-09-12	Show	GitHub Exploit DB Packet Storm

251982	4.3	警告	hypermail-project	-	Hypermail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4339	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

251983	6.2	警告	jwilk	-	ocrodjvu における任意のファイルを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4338	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

251984	3.3	注意	GNU Project	-	gnash の configure スクリプトにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4337	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

251985	7.5	危険	Cake Software Foundation	-	CakePHP の _validatePost 関数における内部 Cake キャッシュを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4335	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

251986	4	警告	io-socket-ssl	-	IO::Socket::SSL モジュールにおける証明書の制限を回避される脆弱性	CWE-310 暗号の問題	CVE-2010-4334	2012-03-27 18:42	2011-01-13	Show	GitHub Exploit DB Packet Storm

251987	7.5	危険	Laurent Destailleur	-	AWStats における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4367	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

251988	4.3	警告	abk-soft	-	Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4366	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251989	7.5	危険	Joomla! Jextensions	-	Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4365	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251990	4.3	警告	dadabik	-	DaDaBIK における保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4364	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246391	7.5	HIGH Network	suncontract	suncontract	The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.	CWE-190 Integer Overflow or Wraparound	CVE-2018-14576	2024-11-21 12:49	2018-08-4	Show	GitHub Exploit DB Packet Storm

246392	6.1	MEDIUM Network	mantisbt	mantisbt	An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allows execution of arbitrary code (if CSP se…	CWE-79 Cross-site Scripting	CVE-2018-14504	2024-11-21 12:49	2018-08-4	Show	GitHub Exploit DB Packet Storm

246393	7.2	HIGH Network	sensiolabs	symfony	An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using Http…	CWE-20 Improper Input Validation	CVE-2018-14774	2024-11-21 12:49	2018-08-4	Show	GitHub Exploit DB Packet Storm

246394	6.5	MEDIUM Network	sensiolabs debian drupal	symfony debian_linux drupal	An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises …	NVD-CWE-noinfo	CVE-2018-14773	2024-11-21 12:49	2018-08-4	Show	GitHub Exploit DB Packet Storm

246395	6.1	MEDIUM Network	djangoproject debian canonical	django debian_linux ubuntu_linux	django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.	CWE-601 Open Redirect	CVE-2018-14574	2024-11-21 12:49	2018-08-4	Show	GitHub Exploit DB Packet Storm

246396	5.4	MEDIUM Network	weaselcms_project	weaselcms	An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.	CWE-79 Cross-site Scripting	CVE-2018-14877	2024-11-21 12:49	2018-08-3	Show	GitHub Exploit DB Packet Storm

246397	5.5	MEDIUM Local	flif	flif	An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng er…	NVD-CWE-noinfo	CVE-2018-14876	2024-11-21 12:49	2018-08-3	Show	GitHub Exploit DB Packet Storm

246398	5.4	MEDIUM Network	rincewind_project	rincewind	An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named commonPages.php.	CWE-79 Cross-site Scripting	CVE-2018-14873	2024-11-21 12:49	2018-08-3	Show	GitHub Exploit DB Packet Storm

246399	7.5	HIGH Network	rincewind_project	rincewind	An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, wit…	CWE-20 Improper Input Validation	CVE-2018-14872	2024-11-21 12:49	2018-08-3	Show	GitHub Exploit DB Packet Storm

246400	7.5	HIGH Network	icmsdev	icms	An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-14858	2024-11-21 12:49	2018-08-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed